{ ... }:
{
  services.nginx = {
    enable = true;
    recommendedGzipSettings = true;
    recommendedOptimisation = true;
    recommendedProxySettings = true;
    recommendedTlsSettings = true;
    virtualHosts."_" = {
      default = true;
      rejectSSL = true;
      extraConfig = ''
        return 421;
      '';
    };
  };
}